Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: dDXMzoAFu4XMVZvQUifC7jbbUbiFpkk2krxyTJIgCAQ=
Subject key identifier: 24:EA:D2:FF:3A:B1:33:1F:8E:45:B0:26:B8:97:7B:62:43:21:4C:6A
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 01963EE69FC44B535BC9F3732A360CA5A553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 14:00:23 +0000
Manifest this update: Wed 16 Apr 2025 14:00:23 +0000
Manifest next update: Thu 17 Apr 2025 14:00:23 +0000
Files and hashes: 1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: cD8y7Vzn46vGy2eGWJ8d7CGoc8l0BGmE/X1P676y44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:9f:c4:4b:53:5b:c9:f3:73:2a:36:0c:a5:a5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Apr 16 14:00:23 2025 GMT
Not After : Apr 17 14:00:23 2025 GMT
Subject: CN=24ead2ff3ab1331f8e45b026b8977b6243214c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:74:8b:c0:9f:3c:4c:b9:ac:a7:17:09:26:
10:ab:1c:c8:7c:e6:65:9c:2f:fe:21:23:f0:fd:e3:
06:bc:7f:a5:1a:54:9c:bf:69:03:43:2c:bc:61:9f:
09:92:53:f7:85:79:b5:eb:5a:31:f3:74:e0:6b:f1:
69:ac:04:54:bf:9f:7d:9f:b7:38:b7:fa:8d:ad:ff:
78:19:57:f2:35:d6:7f:ce:39:e2:1a:db:06:63:58:
b2:dd:fc:7e:35:f9:15:21:c4:a2:aa:50:b5:d5:97:
bd:ba:07:fb:c0:55:6d:ff:0d:28:a1:31:79:8a:44:
62:41:23:22:f0:68:65:f2:06:0b:55:e2:09:2d:16:
dc:50:dc:86:55:ab:c0:23:b0:32:31:a9:a5:12:21:
ec:7c:a4:a0:06:e0:b1:23:99:95:a5:02:49:a7:75:
61:dc:e1:65:cf:17:ac:ff:dc:d0:ef:b7:3c:f7:f7:
9d:d0:c1:37:e9:ee:61:77:da:12:01:7e:91:f6:14:
f2:ab:79:c6:96:e2:98:ef:32:c9:21:41:6f:d3:3d:
77:dd:2b:79:98:49:5d:31:d9:d6:7b:2f:ef:0e:7a:
73:1a:3b:cf:ba:29:db:e2:71:f9:44:5e:85:0d:53:
5c:b9:7f:95:b6:57:eb:73:75:fd:75:2e:f1:b0:f7:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:D2:FF:3A:B1:33:1F:8E:45:B0:26:B8:97:7B:62:43:21:4C:6A
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:94:7b:cf:f2:87:44:dc:11:7f:8c:b5:bf:e5:35:6f:f3:8f:
ad:4f:b6:15:93:e9:53:f6:2f:38:00:2a:e9:2e:8e:9f:d4:23:
52:31:9c:65:87:46:13:2d:f6:fb:6a:d2:c5:09:30:15:77:58:
71:0f:12:95:1a:4d:b0:4e:e1:42:d3:8f:2b:d6:2f:0c:64:5c:
94:07:ea:64:74:80:62:8b:d6:b2:1e:a2:f3:df:2c:06:d4:0d:
b1:97:d4:5f:b3:f7:f1:d0:9f:bd:77:c2:47:a6:82:fe:70:1f:
7b:ec:1c:c5:43:a9:ef:01:83:8e:3b:d6:90:89:b1:fb:17:bf:
74:86:5c:be:be:a3:91:1b:c1:5e:d3:f3:17:c2:a6:59:71:b6:
df:1a:73:15:0e:4d:63:4a:52:29:92:7d:1a:59:da:26:84:01:
3a:6e:68:6c:5e:ae:aa:bd:b7:53:7a:1f:f8:a6:d5:89:f2:2a:
47:a2:68:d9:72:f8:2d:8b:b6:a8:12:33:09:79:4e:af:4b:bb:
5b:a0:e3:7b:8a:e1:6d:48:e0:b2:5e:4b:36:b4:79:fe:74:0d:
84:9f:2e:87:e7:b8:ef:00:3c:dc:13:bf:fe:b3:61:8e:01:d8:
6c:4f:2b:47:b8:bb:37:9e:62:a0:62:79:38:e0:86:23:7b:46:
5b:ca:10:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+5p/ES1NbyfNzKjYMpaVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzRkMzQxMjc5MWUzYTNlOTk0MDQwNTg5ZWM4YWQyZjU4
ZmUzMTIwHhcNMjUwNDE2MTQwMDIzWhcNMjUwNDE3MTQwMDIzWjAzMTEwLwYDVQQD
EygyNGVhZDJmZjNhYjEzMzFmOGU0NWIwMjZiODk3N2I2MjQzMjE0YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4x0i8CfPEy5rKcXCSYQqxzIfOZl
nC/+ISPw/eMGvH+lGlScv2kDQyy8YZ8JklP3hXm161ox83Tga/FprARUv599n7c4
t/qNrf94GVfyNdZ/zjniGtsGY1iy3fx+NfkVIcSiqlC11Ze9ugf7wFVt/w0ooTF5
ikRiQSMi8Ghl8gYLVeIJLRbcUNyGVavAI7AyMamlEiHsfKSgBuCxI5mVpQJJp3Vh
3OFlzxes/9zQ77c89/ed0ME36e5hd9oSAX6R9hTyq3nGluKY7zLJIUFv0z133St5
mEldMdnWey/vDnpzGjvPuinb4nH5RF6FDVNcuX+Vtlfrc3X9dS7xsPe7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTq0v86sTMfjkWwJriXe2JDIUxqMB8GA1UdIwQY
MBaAFMnE00EnkeOj6ZQEBYnsitL1j+MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzIt
Y2M3Zjg3ZjRhOTUwLzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jMmM4YmYtZGNlNC00MjgzLWJmNzItY2M3Zjg3ZjRhOTUw
LzEveWNUVFFTZVI0NlBwbEFRRmlleUswdldQNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJR7z/KH
RNwRf4y1v+U1b/OPrU+2FZPpU/YvOAAq6S6On9QjUjGcZYdGEy32+2rSxQkwFXdY
cQ8SlRpNsE7hQtOPK9YvDGRclAfqZHSAYovWsh6i898sBtQNsZfUX7P38dCfvXfC
R6aC/nAfe+wcxUOp7wGDjjvWkImx+xe/dIZcvr6jkRvBXtPzF8KmWXG23xpzFQ5N
Y0pSKZJ9GlnaJoQBOm5obF6uqr23U3of+KbVifIqR6Jo2XL4LYu2qBIzCXlOr0u7
W6Dje4rhbUjgsl5LNrR5/nQNhJ8uh+e47wA83BO//rNhjgHYbE8rR7i7N55ioGJ5
OOCGI3tGW8oQ4A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:22:45 2025 by rpki-client